Why this one
It cannot delete anything.
An agent working in your document libraries is useful right up to the moment it is wrong. This server is built so that being wrong stays cheap: it can find, read, add and tidy up, and the operations you cannot undo are not merely discouraged — they are absent from the code that talks to Microsoft Graph.
What it is for
Claude works in SharePoint as you, and nothing it does can be lost.
- Read the current version, straight from SharePointAsk about a spreadsheet, a contract or a report where it lives — the bank cashbook, this month's export — instead of downloading it and uploading it into the chat.
- Keep a SharePoint listClaude adds and updates entries — candidates for a payment stop, open items, a month-end checklist — and a person decides what happens with them.
- Put results next to the source, without risk to itApprove one output folder and nothing else. Claude can save its work there, the originals stay read-only, and nothing it does can delete a file.
Only finding and reading documents? The Microsoft 365 connector in Claude does that too. This server is for when Claude should also write, or work with lists, and you want it to be impossible for anything to be deleted.
What it can do
9 tools
Find and read
- sharepoint_sites_searchFind a site by name.
- sharepoint_list_librariesList the document libraries on a site.
- sharepoint_browseWalk a library's folders.
- sharepoint_searchSearch across document contents.
- sharepoint_file_infoSize, last change, who changed it.
- sharepoint_read_fileRead PDF, Word, Excel, text and images.
- sharepoint_list_schemaThe columns of a SharePoint list.
- sharepoint_list_itemsThe rows of a SharePoint list.
- sharepoint_auth_statusWho is signed in, and whether the connection still holds.
10 tools
Write, once approved
- sharepoint_upload_filePut a new file in a folder. A name clash never overwrites.
- sharepoint_create_folderMake a folder.
- sharepoint_update_fileReplace a file's contents. The old version stays in history.
- sharepoint_rename_itemRename a file or folder.
- sharepoint_move_itemMove a file or folder.
- sharepoint_copy_itemCopy a file or folder.
- sharepoint_list_item_createAdd a row to a list.
- sharepoint_list_item_updateChange a row in a list.
- sharepoint_write_request_accessAsk you to approve a library.
- sharepoint_write_revokeGive an approval back.
What it cannot do
Not “should not” — cannot.
- Delete anything
There is no delete tool, and the list of Microsoft Graph routes this server may call carries no DELETE rule at all. The guarantee is an absence, which is why it holds.
- Share a file or change permissions
Sharing links, invitations and permission changes are refused before they are sent.
- Write to a library you have not approved
Every write is checked against the approvals you gave in this browser — both the path and every identifier in the request body.
- Approve a library on your behalf
Approving needs a fresh Microsoft sign-in and a one-time token that exists only in the page you are looking at. An agent has neither.
- Hand your sign-in to an app it does not know
After you sign in, the code that connects your client goes only to Claude or to a program on your own computer, never to an address somebody else registered.
- Read a file type that is not on the allowlist
PDF, Word, Excel, plain text and images. Everything else is refused.
- Read a file larger than 10 MB
The limit is deliberate and there is no larger mode.
How writing gets approved
You approve one library at a time, in your browser.
- The agent asks
It calls write_request_access for one library and quotes a four-character reference. Nothing in SharePoint changes.
- You sign in here
Password and MFA, every time, even if you are already signed in to Microsoft 365. The unexpected prompt is the control: it is what tells you something asked for access.
- You approve one library
Named and addressed on the page, next to the reference the agent quoted. The approval lasts 90 days and you can take it back at any time.
Connect it
Add this address to your MCP client.
https://mcp-sharepoint.swarm-test.ci.alpha.pet/mcp
Your client opens a Microsoft sign-in the first time it connects. The server acts as you, with your permissions — it never has access of its own, and it never sees your password.